Under the law, an employer could not penalize an employee who refuses to
disclose personal online information.

The National Conference of State Legislatures says six states enacted
legislation in 2012 protecting employees, applicants or students asked to
disclose usernames or passwords for a personal social media account. Similar
legislation has been introduced or is pending in at least 28 states in 2013.

Some business leaders complain these measures are vague and leave employers
vulnerable to legal woes.